{"document":{"aggregate_severity":{"text":"hoch"},"category":"csaf_base","csaf_version":"2.0","distribution":{"tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"de-DE","notes":[{"category":"legal_disclaimer","text":"Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen."},{"category":"description","text":"Das Android Betriebssystem von Google ist eine quelloffene Plattform für mobile Geräte. Die Basis bildet der Linux-Kernel.","title":"Produktbeschreibung"},{"category":"summary","text":"Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Google Android und Pixel/Nexus ausnutzen, um beliebigen Programmcode mit erhöhten Rechten auszuführen, um seine Privilegien zu erhöhen, um Informationen offenzulegen oder um einen Denial of Service Zustand herbeizuführen.","title":"Angriff"},{"category":"general","text":"- Android","title":"Betroffene Betriebssysteme"}],"publisher":{"category":"other","contact_details":"csaf-provider@cert-bund.de","name":"Bundesamt für Sicherheit in der Informationstechnik","namespace":"https://www.bsi.bund.de"},"references":[{"category":"self","summary":"WID-SEC-W-2026-4000 - CSAF Version","url":"https://wid.cert-bund.de/.well-known/csaf/white/2018/wid-sec-w-2026-4000.json"},{"category":"self","summary":"WID-SEC-2026-4000 - Portal Version","url":"https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-4000"},{"category":"external","summary":"Android Security Bulletin Juli 2018 vom 2018-07-02","url":"https://source.android.com/security/bulletin/2018-07-01"},{"category":"external","summary":"Pixel/Nexus Security Bulletin Juli 2018 vom 2018-07-02","url":"https://source.android.com/security/bulletin/pixel/2018-07-01"},{"category":"external","summary":"Oracle Linux Security Advisory ELSA-2018-4227 vom 2018-09-26","url":"http://linux.oracle.com/errata/ELSA-2018-4227.html"}],"source_lang":"en-US","title":"Google Android: Mehrere Schwachstellen","tracking":{"current_release_date":"2026-10-15T22:00:00.000+00:00","generator":{"date":"2026-10-16T10:37:19.319+00:00","engine":{"name":"BSI-WID","version":"1.6.0"}},"id":"WID-SEC-W-2026-4000","initial_release_date":"2018-07-02T22:00:00.000+00:00","revision_history":[{"date":"2018-07-02T22:00:00.000+00:00","number":"1","summary":"Initial Release"},{"date":"2018-07-02T22:00:00.000+00:00","number":"2","summary":"Version nicht vorhanden"},{"date":"2018-09-26T22:00:00.000+00:00","number":"3","summary":"New remediations available"},{"date":"2026-10-15T22:00:00.000+00:00","number":"4","summary":"Referenz(en) aufgenommen: EUVD-2017-10837"}],"status":"final","version":"4"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_version","name":"6","product":{"name":"Google Android 6.0","product_id":"317179","product_identification_helper":{"cpe":"cpe:/o:google:android:6.0"}}},{"category":"product_version","name":"6.0.1","product":{"name":"Google Android 6.0.1","product_id":"318084","product_identification_helper":{"cpe":"cpe:/o:google:android:6.0.1"}}},{"category":"product_version","name":"7","product":{"name":"Google Android 7.0","product_id":"T008396","product_identification_helper":{"cpe":"cpe:/o:google:android:7.0"}}},{"category":"product_version","name":"7.1.1","product":{"name":"Google Android 7.1.1","product_id":"T009359","product_identification_helper":{"cpe":"cpe:/o:google:android:7.1.1"}}},{"category":"product_version","name":"7.1.2","product":{"name":"Google Android 7.1.2","product_id":"T009819","product_identification_helper":{"cpe":"cpe:/o:google:android:7.1.2"}}},{"category":"product_version","name":"8","product":{"name":"Google Android 8.0","product_id":"T010672","product_identification_helper":{"cpe":"cpe:/o:google:android:8.0"}}},{"category":"product_version","name":"8.1","product":{"name":"Google Android 8.1","product_id":"T011377","product_identification_helper":{"cpe":"cpe:/o:google:android:8.1"}}}],"category":"product_name","name":"Android"}],"category":"vendor","name":"Google"},{"branches":[{"category":"product_name","name":"Oracle Linux","product":{"name":"Oracle Linux","product_id":"T004914","product_identification_helper":{"cpe":"cpe:/o:oracle:linux:-"}}}],"category":"vendor","name":"Oracle"}]},"vulnerabilities":[{"cve":"CVE-2016-2108","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2016-2108"},{"cve":"CVE-2017-0606","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2017-0606"},{"cve":"CVE-2017-1000","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2017-1000"},{"cve":"CVE-2017-13077","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2017-13077"},{"cve":"CVE-2017-13078","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2017-13078"},{"cve":"CVE-2017-15841","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2017-15841"},{"cve":"CVE-2017-15851","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2017-15851"},{"cve":"CVE-2017-18131","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2017-18131"},{"cve":"CVE-2017-18170","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2017-18170"},{"cve":"CVE-2017-18171","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2017-18171"},{"cve":"CVE-2017-18172","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2017-18172"},{"cve":"CVE-2017-18173","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2017-18173"},{"cve":"CVE-2017-1821","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2017-1821"},{"cve":"CVE-2017-18274","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2017-18274"},{"cve":"CVE-2017-18275","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2017-18275"},{"cve":"CVE-2017-18276","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2017-18276"},{"cve":"CVE-2017-18277","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2017-18277"},{"cve":"CVE-2017-18278","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2017-18278"},{"cve":"CVE-2017-18279","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2017-18279"},{"cve":"CVE-2018-1065","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-1065"},{"cve":"CVE-2018-11257","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-11257"},{"cve":"CVE-2018-11258","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-11258"},{"cve":"CVE-2018-11259","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-11259"},{"cve":"CVE-2018-11304","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-11304"},{"cve":"CVE-2018-3570","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-3570"},{"cve":"CVE-2018-3586","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-3586"},{"cve":"CVE-2018-5703","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-5703"},{"cve":"CVE-2018-5837","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-5837"},{"cve":"CVE-2018-5838","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-5838"},{"cve":"CVE-2018-5855","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-5855"},{"cve":"CVE-2018-5858","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-5858"},{"cve":"CVE-2018-5859","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-5859"},{"cve":"CVE-2018-5862","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-5862"},{"cve":"CVE-2018-5864","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-5864"},{"cve":"CVE-2018-5865","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-5865"},{"cve":"CVE-2018-5872","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-5872"},{"cve":"CVE-2018-5873","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-5873"},{"cve":"CVE-2018-5874","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-5874"},{"cve":"CVE-2018-5875","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-5875"},{"cve":"CVE-2018-5876","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-5876"},{"cve":"CVE-2018-5878","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-5878"},{"cve":"CVE-2018-5882","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-5882"},{"cve":"CVE-2018-5907","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-5907"},{"cve":"CVE-2018-6927","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-6927"},{"cve":"CVE-2018-7995","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-7995"},{"cve":"CVE-2018-9365","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-9365"},{"cve":"CVE-2018-9376","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-9376"},{"cve":"CVE-2018-9410","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-9410"},{"cve":"CVE-2018-9411","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-9411"},{"cve":"CVE-2018-9412","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-9412"},{"cve":"CVE-2018-9413","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-9413"},{"cve":"CVE-2018-9414","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-9414"},{"cve":"CVE-2018-9415","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-9415"},{"cve":"CVE-2018-9416","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-9416"},{"cve":"CVE-2018-9417","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-9417"},{"cve":"CVE-2018-9418","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-9418"},{"cve":"CVE-2018-9419","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-9419"},{"cve":"CVE-2018-9420","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-9420"},{"cve":"CVE-2018-9421","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-9421"},{"cve":"CVE-2018-9422","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-9422"},{"cve":"CVE-2018-9423","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-9423"},{"cve":"CVE-2018-9424","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-9424"},{"cve":"CVE-2018-9426","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-9426"},{"cve":"CVE-2018-9428","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-9428"},{"cve":"CVE-2018-9429","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-9429"},{"cve":"CVE-2018-9430","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-9430"},{"cve":"CVE-2018-9431","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-9431"},{"cve":"CVE-2018-9432","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-9432"},{"cve":"CVE-2018-9433","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-9433"},{"cve":"CVE-2018-9434","product_status":{"known_affected":["318084","T009359","T009819","317179","T011377","T010672","T004914","T008396"]},"release_date":"2018-07-02T22:00:00.000+00:00","title":"CVE-2018-9434"}]}